General

  • Target

    version_2.6_2023.rar

  • Size

    38.6MB

  • Sample

    230420-zwv7baec5z

  • MD5

    a5f0fcca435bc4c13a599df48bbed52c

  • SHA1

    ee1a7371345c661084aef6239bd58d072204d9e4

  • SHA256

    ca4bc63b5ab20803f45b51af345a28435128b4f703ec621d49ecafcba07b473a

  • SHA512

    2ff6c488cd2102ea1d266d57b5cf1df20579fa11be1497d0651644edb2a7d4e7f58eebe8b5699ba813047909ce0e03a40bc2881e28a15663166eab372c927e32

  • SSDEEP

    786432:haizEh7mfvPT3HqCLeDblmdFXekRRkRgikRxqM5PYGl3fccYOgTB0Bmma:siEh7uT3KCSF2FXekRRkRgiooM5Pl3fi

Malware Config

Extracted

Family

raccoon

Botnet

f26f614d4c0bc2bcd6601785661fb5cf

C2

http://37.220.87.66/

xor.plain

Targets

    • Target

      version_2.6_2023.rar

    • Size

      38.6MB

    • MD5

      a5f0fcca435bc4c13a599df48bbed52c

    • SHA1

      ee1a7371345c661084aef6239bd58d072204d9e4

    • SHA256

      ca4bc63b5ab20803f45b51af345a28435128b4f703ec621d49ecafcba07b473a

    • SHA512

      2ff6c488cd2102ea1d266d57b5cf1df20579fa11be1497d0651644edb2a7d4e7f58eebe8b5699ba813047909ce0e03a40bc2881e28a15663166eab372c927e32

    • SSDEEP

      786432:haizEh7mfvPT3HqCLeDblmdFXekRRkRgikRxqM5PYGl3fccYOgTB0Bmma:siEh7uT3KCSF2FXekRRkRgiooM5Pl3fi

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks